According to Ostium, the RWA trading platform's LP vault was attacked on July 15, resulting in a loss of 23.75 million USDC. The attacker compromised an off-chain price oracle infrastructure and submitted fabricated price reports to manipulate trading positions for illegal profit. Trader funds remained unaffected and were stored in isolated smart contracts.
Ostium is investigating the incident in collaboration with Mandiant, zeroShadow, Collisionless, SEAL 911, and law enforcement. Trading was paused and all trading contracts were frozen within 60 minutes of the initial attack transaction. The team is currently hardening infrastructure to ensure secure operations. The platform will provide at least 24 hours notice before unfreezing trading contracts, with trader positions marked at the reopening price.